Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

78.258exploits catalogados
36.019CVEs con explotación pública
24.695probados en laboratorio
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8811Nuclei 4349Metasploit 3488✓ solo verificadosrecientespopularesriesgo
22.657 exploits
Referência
CVE-2026-7694
CVE-2026-7694MEDIUM
Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMinAvgValue sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7692
CVE-2026-7692MEDIUM
Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7691
CVE-2026-7691MEDIUM
Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7690
CVE-2026-7690MEDIUM
Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection
33RIESGO
abrir ↗
Referência
CVE-2026-7689
CVE-2026-7689MEDIUM
Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification
33RIESGO
abrir ↗
Referência
CVE-2026-7687
CVE-2026-7687MEDIUM
langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection
33RIESGO
abrir ↗
Referência
CVE-2016-7255
CVE-2016-7255HIGHbajo ataque
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RIESGO
abrir ↗
Referência
CVE-2016-7287
CVE-2016-7287—
The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary c
35RIESGO
abrir ↗
Referência
CVE-2014-4113
CVE-2014-4113HIGHbajo ataque
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RIESGO
abrir ↗
Referência
CVE-2026-9386
CVE-2026-9386CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9385
CVE-2026-9385CRITICAL
Totolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection
48RIESGO
abrir ↗
Referência
CVE-2026-9376
CVE-2026-9376MEDIUM
JPress UCenter Article Submission Endpoint doWriteSave improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-9372
CVE-2026-9372MEDIUM
ItzCrazyKns Vane Model Provider API route.ts server-side request forgery
33RIESGO
abrir ↗
Referência
CVE-2026-9371
CVE-2026-9371MEDIUM
ItzCrazyKns Vane API route.ts missing authentication
33RIESGO
abrir ↗
Referência
CVE-2026-9370
CVE-2026-9370MEDIUM
ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
33RIESGO
abrir ↗
Referência
CVE-2026-10872
CVE-2026-10872HIGH
Shibby Tomato Web UI rc start_vpnserver os command injection
41RIESGO
abrir ↗
Referência
CVE-2026-10871
CVE-2026-10871HIGH
Shibby Tomato Web UI rc start_6rd_tunnel os command injection
41RIESGO
abrir ↗
Referência
CVE-2026-50266
CVE-2026-50266LOW
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another p
28RIESGO
abrir ↗
Referência
CVE-2019-25745
CVE-2019-25745HIGH
WordPress Plugin Google Review Slider 6.1 SQL Injection via tid
41RIESGO
abrir ↗
Referência
CVE-2019-25735
CVE-2019-25735HIGH
AllPlayer 7.4 Local Buffer Overflow via SEH Unicode
41RIESGO
abrir ↗
Referência
CVE-2026-8764
CVE-2026-8764HIGH
H3C Magic B3 aspForm UpdateWanParams buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2020-37244
CVE-2020-37244HIGH
WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx
41RIESGO
abrir ↗
Referência
CVE-2020-37243
CVE-2020-37243HIGH
WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS
41RIESGO
abrir ↗
Referência
CVE-2026-10809
CVE-2026-10809MEDIUM
itsourcecode Fees Management System manage_user.php sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7678
CVE-2026-7678MEDIUM
YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection
33RIESGO
abrir ↗
Referência
CVE-2026-7443
CVE-2026-7443MEDIUM
BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection
33RIESGO
abrir ↗
Referência
CVE-2012-1465
CVE-2012-1465—
Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause
43RIESGO
abrir ↗
Referência
CVE-2026-7420
CVE-2026-7420HIGH
UTT HiPER 1250GW ConfigAdvideo strcpy buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7419
CVE-2026-7419HIGH
UTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflow
41RIESGO
abrir ↗
Referência
CVE-2026-7418
CVE-2026-7418HIGH
UTT HiPER 1250GW NTP strcpy buffer overflow
41RIESGO
abrir ↗
← anteriorpágina 692 / 756siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.